# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1107

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1108

---

## [Elasticsearch data in another storage server](https://discuss.elastic.co/t/elasticsearch-data-in-another-storage-server/205459)

<div class="topic-metadata">

**Author:** [@morita](https://discuss.elastic.co/u/morita)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 1:13pm UTC](https://discuss.elastic.co/t/elasticsearch-data-in-another-storage-server/205459 "2019-10-31T13:13:00Z")

</div>

hi, I wonder can I use data nodes with sufficient CPU and Ram for indexing documents then save them in another storage server?

---

## [Import own java library for painless](https://discuss.elastic.co/t/import-own-java-library-for-painless/205895)

<div class="topic-metadata">

**Author:** [@alex\_b](https://discuss.elastic.co/u/alex_b)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 1:10pm UTC](https://discuss.elastic.co/t/import-own-java-library-for-painless/205895 "2019-10-31T13:10:17Z")

</div>

Hi, when using painless, a shared java API is included for usage. Is it possible to add an own java library to the shared API, to make it also usable in painless scripts?

---

## [Wazuh API cannot start, multiple errors](https://discuss.elastic.co/t/wazuh-api-cannot-start-multiple-errors/205780)

<div class="topic-metadata">

**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 1:03pm UTC](https://discuss.elastic.co/t/wazuh-api-cannot-start-multiple-errors/205780 "2019-10-31T13:03:43Z")

</div>

My wazuh-manager version installed v3.9.3 (for Kibana 7.1.1) but the wazuh-api cannot be started. I have run the following command to remove / reindex the system: service kibana stop curl -u elastic -XDELETE 10.0.106.1…

---

## [Searching/filtering index B using all field.values from index A](https://discuss.elastic.co/t/searching-filtering-index-b-using-all-field-values-from-index-a/205773)

<div class="topic-metadata">

**Author:** [@bug\_tester](https://discuss.elastic.co/u/bug_tester)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 1:02pm UTC](https://discuss.elastic.co/t/searching-filtering-index-b-using-all-field-values-from-index-a/205773 "2019-10-31T13:02:22Z")

</div>

i'm new to elastic stack and trying to figure out how to approach this problem. I have two index A B . data is being fed into them regularly index A has many fields including a model field with model name {"mode…

---

## [Query on array](https://discuss.elastic.co/t/query-on-array/205899)

<div class="topic-metadata">

**Author:** [@Segfault](https://discuss.elastic.co/u/Segfault)\
**Replies:** 0\
**Last updated:** [October 30, 2019, 3:45pm UTC](https://discuss.elastic.co/t/query-on-array/205899 "2019-10-30T15:45:24Z")

</div>

Hello world, I'm trying to query with a filter to restrict array size. (Only get the results that have more than 1 object inside the transactions array) I can't manage to get it working. I hope some people here have so…

---

## [Partial date search on Date Of Birth Fields](https://discuss.elastic.co/t/partial-date-search-on-date-of-birth-fields/206023)

<div class="topic-metadata">

**Author:** [@Pushpak\_Chavan](https://discuss.elastic.co/u/Pushpak_Chavan)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 12:47pm UTC](https://discuss.elastic.co/t/partial-date-search-on-date-of-birth-fields/206023 "2019-10-31T12:47:25Z")

</div>

Hi, I have one field which is dateofbirth whose mapping is something like below "dateofbirth" : { "type" : "date", "fields" : { "tokens" : { "type" : "text" } }, "ignore\_malformed" : true, "format" : "yyyy-MM-d…

---

## [type":"date\_time\_exception","reason":"Invalid date 'February 29' as '1970' is not a leap year"}](https://discuss.elastic.co/t/type-date-time-exception-reason-invalid-date-february-29-as-1970-is-not-a-leap-year/205570)

<div class="topic-metadata">

**Author:** [@GeoffreyCutaia](https://discuss.elastic.co/u/GeoffreyCutaia)\
**Replies:** 5\
**Last updated:** [October 31, 2019, 12:42pm UTC](https://discuss.elastic.co/t/type-date-time-exception-reason-invalid-date-february-29-as-1970-is-not-a-leap-year/205570 "2019-10-31T12:42:30Z")

</div>

Hi, We have some issues trying to index documents with date fields set on the 29 of February. Below an example : {"type":"mapper\_parsing\_exception","reason":"failed to parse field \[date\_updated\] of type \[date\] in docu…

---

## [Running elasticsearch-sql-cli Script on Remote Machines](https://discuss.elastic.co/t/running-elasticsearch-sql-cli-script-on-remote-machines/205143)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 6\
**Last updated:** [October 31, 2019, 12:39pm UTC](https://discuss.elastic.co/t/running-elasticsearch-sql-cli-script-on-remote-machines/205143 "2019-10-31T12:39:03Z")

</div>

Hello again Elasticsearch wizards, I have what is probably a stupid Java question. I’ve spun up a Docker container of Elasticsearch v7.4.0, and I’m loving the “elasticsearch-sql-cli” script you can use to submit SQL-li…

---

## [Store Filtered Results](https://discuss.elastic.co/t/store-filtered-results/205910)

<div class="topic-metadata">

**Author:** [@bmille52](https://discuss.elastic.co/u/bmille52)\
**Replies:** 2\
**Last updated:** [October 31, 2019, 12:35pm UTC](https://discuss.elastic.co/t/store-filtered-results/205910 "2019-10-31T12:35:15Z")

</div>

I have a character filter that removes some markdown elements, such as link structure, from a text blob Im storing. I'd like to be able to use the filtered results for highlighting so that I can show highlights of the te…

---

## [Query with multiple AND and OR clauses in a filter context?](https://discuss.elastic.co/t/query-with-multiple-and-and-or-clauses-in-a-filter-context/202678)

<div class="topic-metadata">

**Author:** [@jyridevelopingsw](https://discuss.elastic.co/u/jyridevelopingsw)\
**Replies:** 7\
**Last updated:** [October 31, 2019, 12:28pm UTC](https://discuss.elastic.co/t/query-with-multiple-and-and-or-clauses-in-a-filter-context/202678 "2019-10-31T12:28:37Z")

</div>

Is it possible to perform a complex query in just filter context? In my case scoring does not matter at all. The documentation states that in a bool query filter and must\_not are performed in a filter context. So can I …

---

## [Not receiving email from watcher](https://discuss.elastic.co/t/not-receiving-email-from-watcher/205351)

<div class="topic-metadata">

**Author:** [@Muhammad\_Irfan](https://discuss.elastic.co/u/Muhammad_Irfan)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 12:27pm UTC](https://discuss.elastic.co/t/not-receiving-email-from-watcher/205351 "2019-10-31T12:27:17Z")

</div>

Dears, Greetings, I am new in ELK cluster and try to create watcher on my laptop, email configuration set on elastisearch.yml file but don't get emails. Secondly, I am bit confused in transform in watcher. Do i need t…

---

## [How do I identify and remove words from a search phrase that don't exist in my elasticsearch index using suggetors?](https://discuss.elastic.co/t/how-do-i-identify-and-remove-words-from-a-search-phrase-that-dont-exist-in-my-elasticsearch-index-using-suggetors/205996)

<div class="topic-metadata">

**Author:** [@Richard\_Mann](https://discuss.elastic.co/u/Richard_Mann)\
**Replies:** 0\
**Last updated:** [October 31, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-do-i-identify-and-remove-words-from-a-search-phrase-that-dont-exist-in-my-elasticsearch-index-using-suggetors/205996 "2019-10-31T07:58:04Z")

</div>

Hello, I'm trying to get support on the following: In summary, please assume the following for my situation: I am trying to create a 'did you mean' feature using the ES Suggester feature. My goal is to turn this "gr…

---

## [Supply a list to filter in search template](https://discuss.elastic.co/t/supply-a-list-to-filter-in-search-template/206031)

<div class="topic-metadata">

**Author:** [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Replies:** 0\
**Last updated:** [October 31, 2019, 12:00pm UTC](https://discuss.elastic.co/t/supply-a-list-to-filter-in-search-template/206031 "2019-10-31T12:00:44Z")

</div>

can we supply a list of phrases in search template for filtering purposes , if there is any example, can someone point me to it. thanks

---

## [ElasticSearch with SSL?](https://discuss.elastic.co/t/elasticsearch-with-ssl/205278)

<div class="topic-metadata">

**Author:** [@xemyleex](https://discuss.elastic.co/u/xemyleex)\
**Replies:** 11\
**Last updated:** [October 31, 2019, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-with-ssl/205278 "2019-10-31T11:42:39Z")

</div>

Hello, I am trying to configure elasticsearch with SSL, but I get these error, I followed this tutorial: https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls.html So I created the Certificat…

---

## [401 - Sign in error after encryption setup](https://discuss.elastic.co/t/401-sign-in-error-after-encryption-setup/205976)

<div class="topic-metadata">

**Author:** [@Nay\_Myo\_Zaw](https://discuss.elastic.co/u/Nay_Myo_Zaw)\
**Replies:** 5\
**Last updated:** [October 31, 2019, 10:16am UTC](https://discuss.elastic.co/t/401-sign-in-error-after-encryption-setup/205976 "2019-10-31T10:16:38Z")

</div>

I'm getting Sing In issue after encryption setup for Clusters. I have no idea how to remove password or how to set password. Elastic Version : 7.4

---

## [Create a watch to alert](https://discuss.elastic.co/t/create-a-watch-to-alert/206007)

<div class="topic-metadata">

**Author:** [@NinjaMonkey](https://discuss.elastic.co/u/NinjaMonkey)\
**Replies:** 0\
**Last updated:** [October 31, 2019, 9:31am UTC](https://discuss.elastic.co/t/create-a-watch-to-alert/206007 "2019-10-31T09:31:00Z")

</div>

I am trying to find out nodes left or nodes joined in ElasticSearch 6.4 Looks like node\_left and node\_joined events has been removed from marvel indexes in latest versions . Is there any other way to create a watch to a…

---

## [Count values within an element created today](https://discuss.elastic.co/t/count-values-within-an-element-created-today/205901)

<div class="topic-metadata">

**Author:** [@fernrguez](https://discuss.elastic.co/u/fernrguez)\
**Replies:** 3\
**Last updated:** [October 31, 2019, 8:50am UTC](https://discuss.elastic.co/t/count-values-within-an-element-created-today/205901 "2019-10-31T08:50:37Z")

</div>

Hi all, I'm trying to create a query to retrieve a list of elements that indicates the number of appearance for current day. For example, I have logs with logLevel that could be ERROR, INFO, WARN, .. So far I have thi…

---

## [Pushing info from fingerprint access point to ElasticSearch, Any case study URL](https://discuss.elastic.co/t/pushing-info-from-fingerprint-access-point-to-elasticsearch-any-case-study-url/206001)

<div class="topic-metadata">

**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\
**Replies:** 0\
**Last updated:** [October 31, 2019, 8:47am UTC](https://discuss.elastic.co/t/pushing-info-from-fingerprint-access-point-to-elasticsearch-any-case-study-url/206001 "2019-10-31T08:47:09Z")

</div>

Hi All, Good afternoon I am trying to look for case studies on "Using Elasticsearch for gathering fingerprint access device and doors information to the elastic search Is there any link or docs which I can refer th…

---

## [How to don't save empty fields in elastic search?](https://discuss.elastic.co/t/how-to-dont-save-empty-fields-in-elastic-search/205980)

<div class="topic-metadata">

**Author:** [@Mehrdad.dev](https://discuss.elastic.co/u/Mehrdad.dev)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 8:21am UTC](https://discuss.elastic.co/t/how-to-dont-save-empty-fields-in-elastic-search/205980 "2019-10-31T08:21:31Z")

</div>

Hi . i want store data in elastic search with regardless empty data in some fields. if a filed be empty don't store this filed. can you help me ?

---

## [Version 7.1.1 Amazing thing. Director become file After a power failure](https://discuss.elastic.co/t/version-7-1-1-amazing-thing-director-become-file-after-a-power-failure/205990)

<div class="topic-metadata">

**Author:** [@panxuelin](https://discuss.elastic.co/u/panxuelin)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 7:28am UTC](https://discuss.elastic.co/t/version-7-1-1-amazing-thing-director-become-file-after-a-power-failure/205990 "2019-10-31T07:28:02Z")

</div>

After power off system while writing and start elasticsearch Caused by: org.elasticsearch.gateway.WriteStateException: failed to open state directory /disks/data5/elasticsearch/nodes/0/indices/PQDYiAG4SV2bc9Wrt59T8A/\_s…

---

## [Version 7.1.1 Corrupted translog After a power failure](https://discuss.elastic.co/t/version-7-1-1-corrupted-translog-after-a-power-failure/205968)

<div class="topic-metadata">

**Author:** [@panxuelin](https://discuss.elastic.co/u/panxuelin)\
**Replies:** 12\
**Last updated:** [October 31, 2019, 7:10am UTC](https://discuss.elastic.co/t/version-7-1-1-corrupted-translog-after-a-power-failure/205968 "2019-10-31T07:10:11Z")

</div>

Translog has become corrupted and why would this happen. Can close system file cache fix the Problem Completely? "unassigned\_info": { "reason": "ALLOCATION\_FAILED", "at": "2019-10-09T07:08:10.690Z", "failed\_attempts"…

---

## [Shards stuck in INITIALIZATION due to mismatch in State on targetnode](https://discuss.elastic.co/t/shards-stuck-in-initialization-due-to-mismatch-in-state-on-targetnode/205939)

<div class="topic-metadata">

**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 6:29am UTC](https://discuss.elastic.co/t/shards-stuck-in-initialization-due-to-mismatch-in-state-on-targetnode/205939 "2019-10-31T06:29:43Z")

</div>

Multiple Replica shards are stuck in initialisation phase because there seems to be a mismatch in the Shard status. I am seeing multiple messages of this type \[indices.recovery \] \[node-24\] delaying recovery of …

---

## [Auto resharding capabilities](https://discuss.elastic.co/t/auto-resharding-capabilities/205515)

<div class="topic-metadata">

**Author:** [@marb](https://discuss.elastic.co/u/marb)\
**Replies:** 5\
**Last updated:** [October 31, 2019, 6:10am UTC](https://discuss.elastic.co/t/auto-resharding-capabilities/205515 "2019-10-31T06:10:56Z")

</div>

Hi, I had recently some discussions about auto resharding capabilities in Elasticsearch: basically, at some point in time, without any human intervention, the system would "detect" that for a given index resharding is n…

---

## [Restirct users with search filter](https://discuss.elastic.co/t/restirct-users-with-search-filter/205558)

<div class="topic-metadata">

**Author:** [@shappy123](https://discuss.elastic.co/u/shappy123)\
**Replies:** 5\
**Last updated:** [October 31, 2019, 6:10am UTC](https://discuss.elastic.co/t/restirct-users-with-search-filter/205558 "2019-10-31T06:10:17Z")

</div>

Hi, Can anyone please assist me on this : I need users not to search huge queries or if they search queries on kibana discover , they must add a filter. The reason behind this is because users queries huge amount of da…

---

## [Questions about SQL CLI](https://discuss.elastic.co/t/questions-about-sql-cli/205803)

<div class="topic-metadata">

**Author:** [@smash](https://discuss.elastic.co/u/smash)\
**Replies:** 2\
**Last updated:** [October 31, 2019, 5:23am UTC](https://discuss.elastic.co/t/questions-about-sql-cli/205803 "2019-10-31T05:23:51Z")

</div>

hello hello! If "-" is included in index, an error occurs. How can I escape? \\ Was added but it was not escaped. #Error Msg Sql\>select Count(\*) from db01-TEST; Bad request \[line 1:25: extraneous input '-' expecting…

---

## [Assistance in Formulating a Query using NEST Api](https://discuss.elastic.co/t/assistance-in-formulating-a-query-using-nest-api/205944)

<div class="topic-metadata">

**Author:** [@han1](https://discuss.elastic.co/u/han1)\
**Replies:** 0\
**Last updated:** [October 30, 2019, 8:31pm UTC](https://discuss.elastic.co/t/assistance-in-formulating-a-query-using-nest-api/205944 "2019-10-30T20:31:24Z")

</div>

We have a requirement that we think is a candidate for a Multi-Search or Named Queries - but we are not sure. Say we are selling clothes. The user can enter a type of clothing such as Shirts and we bring back all the s…

---

## [Index Status](https://discuss.elastic.co/t/index-status/205974)

<div class="topic-metadata">

**Author:** [@priyadarshan1995](https://discuss.elastic.co/u/priyadarshan1995)\
**Replies:** 0\
**Last updated:** [October 31, 2019, 4:46am UTC](https://discuss.elastic.co/t/index-status/205974 "2019-10-31T04:46:35Z")

</div>

Hi, Is there any way to know the current status of an index. Like whether data is being written into an index currently and if so after completion of it, how can I stop the index from being written into before it can be…

---

## [Unable to update index settings](https://discuss.elastic.co/t/unable-to-update-index-settings/205781)

<div class="topic-metadata">

**Author:** [@luok0](https://discuss.elastic.co/u/luok0)\
**Replies:** 5\
**Last updated:** [October 31, 2019, 2:42am UTC](https://discuss.elastic.co/t/unable-to-update-index-settings/205781 "2019-10-31T02:42:14Z")

</div>

Try to update "read\_only\_allow\_delete" to False, but not working, it always turns out to be True no matter how many attempts have been made. bash-4.1$ date Tue Oct 29 23:07:01 EDT 2019 bash-4.1$ curl -X PUT "localhost:9…

---

## [ES 5.6.10 default mapping field store Double and BigDecimal into string](https://discuss.elastic.co/t/es-5-6-10-default-mapping-field-store-double-and-bigdecimal-into-string/205966)

<div class="topic-metadata">

**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\
**Replies:** 0\
**Last updated:** [October 31, 2019, 2:39am UTC](https://discuss.elastic.co/t/es-5-6-10-default-mapping-field-store-double-and-bigdecimal-into-string/205966 "2019-10-31T02:39:20Z")

</div>

Hi guys , i use XContentBuilder as a source of Index Request to store my biz data, like this jsonBuilder() .startObject() .field("table", Constants.ES\_IDX\_REPAYMENT) .field("nation", repayment.getNation()) .field("a…

---

## [Difference between analyzer and normalizer](https://discuss.elastic.co/t/difference-between-analyzer-and-normalizer/205897)

<div class="topic-metadata">

**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\
**Replies:** 1\
**Last updated:** [October 30, 2019, 11:55pm UTC](https://discuss.elastic.co/t/difference-between-analyzer-and-normalizer/205897 "2019-10-30T23:55:39Z")

</div>

Hello, what is the difference between analyzer and normalizer? Thanks Daniele

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1106)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1108)
